4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc

General

Target
4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc
Size 108KB
Sample260930-pwrtsaydpf
SHA256 4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc
MD5 a27703e957753487ce0c65865e8a6464
SHA1 08d47faedf7940eff2704fff9d3758f2aa0b4389
SHA512 3934b78b1affc8e5d8d99b2c051a18b54c8309b2942ff33e3ff1f9056d40ed55d22dcb5299e7f75e0b12ebc2d09a8a38a57d300c2ddd8a96f99b444e464cb480
SSDEEP 1536:P2oAiel9wqYhKp1+AV+cioOOcMlq9h7oTXYi1T32GsX:P2oUwqYopBgci0fq9uTXV1TGGy
TLSH
T1E3B36B226BC9C135F1B68E3466F41222563179415F20CAEF5260AA1F5CF4FD0EC79BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc

File Explorer

4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc

.dll 108KB

4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc

IMPHASH fb35cbd1169850d5028b81c2bfeca8da
SHA256 4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc
MD5 a27703e957753487ce0c65865e8a6464
SHA1 08d47faedf7940eff2704fff9d3758f2aa0b4389
SHA512 3934b78b1affc8e5d8d99b2c051a18b54c8309b2942ff33e3ff1f9056d40ed55d22dcb5299e7f75e0b12ebc2d09a8a38a57d300c2ddd8a96f99b444e464cb480
SSDEEP 1536:P2oAiel9wqYhKp1+AV+cioOOcMlq9h7oTXYi1T32GsX:P2oUwqYopBgci0fq9uTXV1TGGy
TLSH
T1E3B36B226BC9C135F1B68E3466F41222563179415F20CAEF5260AA1F5CF4FD0EC79BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegGetValueW RegSetValueExW

ole32

OleInitialize OleUninitialize

comctl32

InitCommonControlsEx PropertySheetW

user32

BeginPaint ChangeDisplaySettingsExW CreateWindowExW DefWindowProcW DrawTextW EndPaint EnumDisplayDevicesW EnumDisplaySettingsExW EnumDisplaySettingsW FillRect GetClientRect GetDlgItem GetSysColor GetWindowLongPtrW IntersectRect InvalidateRect IsDlgButtonChecked RegisterClassW SendDlgItemMessageW SendMessageW SetCapture SetWindowLongPtrW ShowWindow UnionRect UnregisterClassW

gdi32

GetStockObject Rectangle RoundRect SelectObject SetDCBrushColor SetDCPenColor

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vswprintf _strdup calloc free fwrite getenv memcpy memmove memset strchr strcmp strcpy strcspn strlen

kernel32

ActivateActCtx CreateActCtxW DeactivateActCtx DisableThreadLibraryCalls GetModuleHandleW GetProcAddress GetTickCount HeapAlloc HeapReAlloc ReleaseActCtx

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

4029797a391700d91574c91eac71de0611118ee0f784954fe730bdfce63c72bc

advapi32

ole32

comctl32

user32

gdi32

ucrtbase

kernel32

ntdll

generic